How do you get past Vista security ? Digitally sign your malware !

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Certificate Enrollment API: Request on behalf of another user Hi What is the correct process to request a certificate on behalf of another user by using the new Certificate Enrollment API (certenroll.dll) with Windows Vista / Windows Server 2008? I know, that - I need a IX509CertificateRequestPkcs10 request object - I need a IX509CertificateRequestCmc object - I need a IX509NameValuePair object (request on behalf...) - I need a IX509Enrollment object But, what are the correct steps to assemble the request and install the signed response from a CA? Any help is welcome. Thanks and Regards, Dominik ----------------------------- http://blogs.ecreation.ch Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96680
  - 2
    - share premission errors I cannot run exe files directly from the server. When running them from the share (\\server\share\file.exe), I get a permissions error that reads "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." It does run however when I execute it from explorer using the drive (D:\folder\file.exe), or using the unc path from another computer. I am logging in as the domain admin. All users have full share permissions. What could be causing this? Thanks for any help, Brian Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96675
  - 3
    - Don't mention this to Bill G or Steve B.. http://it.slashdot.org/article.pl?sid=08/02/10/2011257 ..or they might fall off their respective stools laughing. :-)))) Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96667
  - 4
    - Close open Files Hello, I would like to enable a user to close open files (that do not belong to him) through Computer Management on a 2000 or 2003 file server WITHOUT making him a member of the administrators or Server Operators group. Is that possible and what would the minimum rights be that would have to be granted? Thanks for any help! Harry Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96663
  - 5
    - =?Utf-8?Q?ABOUT_THE_DESK_OF_THE_MICROSOFT=E2=84=A2?= MOTTO: FIGHTING POVERTY AROUND THE WORLD FROM: THE DESK OF THE MICROSOFTâ?¢ PROMOTIONS MANAGER INTERNATIONALPROMOTIONS/PRIZE AWARD DEPARTMENT, 90 Long Acre,Covent GardenLONDON,WC2E 9RZ United Kingdom. REF.:PEC/9030108308/07.Batch: 15/76/EF36. Serial No: SALP97585.FILE No: B665 75608567. Security code ZA/183/RR ELECTRONIC EMAIL AWARD WINNING NOTIFICATION AWARD PRESENTATION CENTER : UNITED KINGDOM ATTN: WINNER, Microsoftâ?¢ co-operation management worldwide is pleased to inform youthat you are a winner of our annual MICROSOFTâ?¢ USER AWARD-Lotteryconducted in UNITED KINGDOM . Your personal e-mail address or company email was attached toSerial No: SALP97585. Consequently winning in the first lottery category. You have therefore been APPROVED for a total sums of Â£1000000.00 OneMillion United Kingdom Pounds) Credited to FILE No: B665 75608567. WithREF.:PEC/9030108308/07. This is from total prize money of Â£60,000,000,shared among the Seventy-five (75) lucky Worldwide winners in firstcategory . All participants were selected through our Microsoft computer ballotsystem, drawn from Canada, Asia, Australia, United States, Europe, MiddleEast, Africa and Oceania .As part of international "MICROSOFTâ?¢ USER" promotions program, this is conducted annually. CONTACT CLAIM OFFICEMr.PAUL WINTERSPROMOTION MANAGER. 24hrs hot-line :+Tel:44-703 182 07 15Tel:44-702 402 94 81Fax:44-870 479 62 30 Email:claimoffice.microsoft1@googlemail.com Remember, all prize money must be claimed within 90 days ofthisnotification. All funds not claimed on or before the fixed date willbe returned as unclaimed and donated to charity organizations.Congratulations, once more from the entire management and staff ofMicrosoftâ?¢ co-operation to all our lucky winners this year.Thank you forbeing part of this promotional lottery program. Sincerely, MRS. BROWN CATHY (SECRETARY) AWARD SPONSORSMICROSOFTâ?¢ CORPORATION. Please call your claim agent if your mail was not responded to within 24hours: PLEASE SEND A COPY OF YOUR CONTACT INFORMATIONS TO BOTH EMAILS PROVIDEDABOVE.1, Full Names:2, Date of birth:3, Present Contact Address:4, Country Of Residence:5, Tel/Fax:6, Your Winning serial and ref. no.:7, Winning Email address:8, Occupation9, Sex:10 Total amount won: Â£1000000.0011, Mode Of Paymenti Bank Transfer {T/T} For Security reasons, you are advised to keep your winning informationCONFIDENTIAL Microsoftâ?¢ takes all reasonable steps to ensure that the information inthis email is accurate.However, the company gives no warranty, whether express or implied,regarding the content of this email, nor do we accept liability for anyloss or damage which may result from your receipt of this message. Anydecision made by an individual based on information in this email is theresponsibility of that individual alone. You have to note that the onlyperson that have the right to represent you in your claim is yourappointed Agent only. Copyright Â© 1998-2008 The MICROSOFTâ?¢ Inc.All rights reserved. Terms of Service - Guideline Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96658
  - 6
    - detecting lame passwords I know that the standard disclaimers apply: running certain security auditing tools without permission may be criminally prosecutable, and at least grounds for termination. With that happy thought in mind, what tools would you recommend for finding who has a weak password? I've explained that Winter07 is not a good password, but since Windows will accept it, I think that some kind of auditing is my next prudent step. Recommended products for preventing this in the first place are welcome as well. But presenting a user with their password as evidence that they chose a weak password seems to be hard to argue with. My assumption is that such a tool would run under the admin account, and that the tool itself should secured to said account. ________ Greg Stigers, MCSA remember to vote for the answers you like Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96653
  - 7
    - Grant Access to Different Profiles Our company has a stand a long laptop - No domain - Its primary function is to connect using IE to our four local-internal Webcam servers (Windows XP) for surveillance purposes. We had two kind of users logging into the computer. Administrator and security are the names for the two user's profiles. The computer has access to the Internet, MS Office, Windows games, etc. Our goal is to grant the Administrator full access to all of the resources available into the computer. The second user profile "Security" should ONLY have access to the IE to view the WEBCAM servers (No access to the Internet or any other software). If you have any suggestions on how to accomplish this will be very appreciated. Thank you in advance for your help and assistance with this task! Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96649
  - 8
    - Mind Control "mailteam" works-- victims work trends Mind Control "mailteam works"--- victims work trends http://soleilmavis.googlepages.com mind control victims website (1) discovery channel Electronic Mind Control Pt 1 http://www.youtube.com/watch?v=k3aZyDiyI7g Electronic Mind Control Pt 2 http://www.youtube.com/watch?v=qh7FEwIbQds Electronic Mind Control Pt 3 http://www.youtube.com/watch?v=6nA1__XIYUo (2) CORRECTIONS RE ROBERT DUNCAN'S INTERVIEW Robert Duncan, B.A., M.S., M.B.A,. Ph.D. will be interviewed this Feb 12th, 2008 @ 11:30pm on the Richard Syrett show. The topics are broad: directed energy neurological weapons, EEG cloning/psychic warfare, brain washing, torture, interrogation, mind viruses, silent eugenics programs, silent assassination/warfare, military deception tactics, discrediting tactics, creating public myths, false flag operations, psychological warfare, information warfare, cognitive warfare, cultural engineering, remote renditions, the CIA's "scripts and tricks", NSA signal encoding/decryption/deception methods, human behavior modification experiments, etc. WWIII has already begun but it is fought in the hearts and minds of people silently. Choice and freedom are merely an illusion. Munich, Germany (in German) ?TBD. Topics include: Distributed death camps, worse-than-lethal weapons, disguising genocides in statistics of common diseases, neurological cognitive containment fields, US sponsored psychoterrorism, and more. Hitler is rolling in his grave out of jealousy of what the US and its territories (Canada, Australia, and the UK) have done. (3) Victims online shops Victims have already done a lot of works. But we also know Victims need to support their life and their activities. We have been encouraging victims to open an online shops to earn extra money. We wish more victims can build their online shops. Here are some online shops. RINOA Rinoa's Secret Garden-07 Main business: Clothes. http://shop20150018.taobao.com/ Soleilmavis Main Business: Self made Pure Natural Beauty skin care products; selfmade flower tea and herbal tea; Hand made products; clothes. http://shop34821367.taobao.com/ Tanglang Main Business: provide on door photo services. for Art photography, wedding photography, photography of children, families commemorate photography, pet photography, and photography for major conference. http://auction1.taobao.com/auction/14-2807-280704/item_detail-0db1-5333e9dd0dc73b266f75424c400ffdce.jhtml duanjinping88 Main Business: hand made dry flower crafts, Greeting cards, bookmarks. Bringing you closer to the nature! http://shop35296794.taobao.com/ guoruquan Main business: South China countries side selfmade dry fish and dry meat. tea. http://shop34876045.taobao.com/ hy99 Main business: Jewelry http://shop33055862.taobao.com/ Spring Main business: Software development http://shop.paipai.com/674614570 (4) CARDS AND RIBBONS I've made some cards that can be handed out with the new awareness ribbons. They can be viewed at this link: www.freedomfchs.com/cardandribbon.jpg We will be sending them out free to the TI community upon request as vehicles for outreach about our issues. Just send an email to me at: dcr618@msn.com (5) SAMPLE OS/EH BILL This bill was written in conjunction with activist Mary Ann Stratton - www.controlledamerica.com Those that are in contact with legislators, feel free to send this along with other information they may request. ORGANIZED STALKING AND DIRECTED ENERGY WEAPONS HARASSMENT BILL A bill to provide protections to individuals who are being harassed,stalked, harmed by surveillance, and assaulted; as well as protections to keep individuals from becoming human research subjects, tortured, and killed by electronic frequency devices, directed energy devices, implants, and directed energy weapons. Section 1. Short Title This bill may be cited as the "Organized Stalking and Directed Energy Devices and Weapons Bill " Section 2. Findings and Purpose A) Findings 1) The constitution guarantees the right of the people to be secure in their person. The Declaration of Independence asserts as self-evident that all men have certain inalienable rights and that among these are life, liberty, and the pursuit of happiness. 2) As Supreme Court Justice Louis Brandeis wrote in 1928, "the framers of the Constitution sought "to protect Americans in their beliefs, their thoughts, their emotions, and their sensations." It is for this reason that they established, as against the government, the right to be let alone as "the most comprehensive of rights and the right most valued by civilized men." 3) The first principle of the Nuremberg Code states that with respect to human research, the voluntary consent of the human subject is absolutely essential. The Nuremberg Code further asserts that such consent must be competent, informed, and comprehending. 4) There are current regulations implementing the obligations of the United States to adhere to Article 3 of the United Nations Convention Against Torture and other Forms of Cruel, Inhumane or Degrading Treatment including all terms that are Subject to any reservations, understandings, declarations, and provisions contained in the United States Senate resolution of ratification of the Convention. B) Purpose To establish regulations and penalties for those who use any type of electronic frequency devices, directed energy devices, implants, surveillance technology, and directed energy weapon to purposefully cause any of the following: stalking, harassing, mental or physical harm, injury, harmful surveillance, torture, diseases, and death to any United States citizen. Section 3. Organized Stalking If two or more persons willfully, maliciously, and repeatedly follow or willfully and maliciously harass another person and who make a credible threat with the intent to place that person in reasonable fear for his or her safety, or the safety of his or her immediate family, they are guilty of the crime of organized stalking, punishable by imprisonment in a county jail for not more than one year, or by not more than one thousand dollars ($ 1,000), or by both that fine and imprisonment, or by imprisonment in a federal prison. If two or more persons violate subdivision (a) when there is a temporary restraining order, injunction, or any other court order in effect prohibiting the behavior described in subdivision (a) against the same party, they shall be punished by imprisonment in the state prison for two, three, or four years. For the purposes of this section, "harass" means engages in a knowing and willful course of conduct directed at a specific person that seriously alarms, annoys, torments, or terrorizes the person, or damages his personal property or possessions and that serves no legitimate purpose. * * * For the purposes of this section, "course of conduct" means two or more acts occurring over a period of time, however short, evidencing a continuity of purpose. Constitutionally protected activity is not included within the meaning of "course of conduct." For the purposes of this section, "credible threat" means a verbal or written threat, including that performed through the use of an electronic communication device, or a threat implied by a pattern of conduct or a combination of verbal, written, or electronically communicated statements and conduct, made with the intent to place the person that is the target of the threat in reasonable fear for his or her safety or the safety of his or her family, or personal property or possessions and made with the apparent ability to carry out the threat so as to cause the person who is the target of the threat to reasonably fear for his or her safety or the safety of his or her family or personal property or possessions. It is not necessary to prove that the defendant had the intent to actually carry out the threat. The present incarceration of a person making the threat shall not be a bar to prosecution under this section. Constitutionally protected activity is not included within the meaning of "credible threat." For purposes of this section, the term "electronic communication device" includes, but is not limited to, telephones, cellular phones, computers, video recorders, fax machines, pagers or synthetic telepathy devices. The sentencing court also shall consider issuing an order restraining the defendant from any contact with the victim, that may be valid for up to 10 years, as determined by the court. It is the intent of the Legislature that the length of any restraining order be based upon the seriousness of the facts before the court, the probability of future violations, and the safety of the victim and his or her immediate family. For purposes of this section, "immediate family" means any spouse,parent, child, any person related by consanguinity or affinity within the second degree, or any other person who regularly resides in the household, or who, within the prior six months, regularly resided in the household. Section 4. Punishment for threats Any person or persons who willfully threatens to commit a crime which will result in death or great bodily injury to another person, with the specific intent that the statement, made verbally, in writing, or by means of an electronic communication device, is to be taken as a threat, even if there is no intent of actually carrying it out, which, on its face and under the circumstances in which it is made, is so unequivocal, unconditional, immediate, and specific as to convey to the person threatened, a gravity of purpose and an immediate prospect of execution of the threat, and thereby causes that person reasonably to be in sustained fear for his or her own safety or for his or her immediate family's safety, shall be punished by imprisonment in a federal prison not to exceed one year.. For the purposes of this section, "immediate family" means any spouse,whether by marriage or not, parent, child, any person related by consanguinity or affinity within the second degree, or any other person who regularly resides in the household, or who, within the prior six months, regularly resided in the household. "Electronic communication device" includes, but is not limited to,telephones, cellular telephones, computers, video recorders, fax machines, pagers or synthetic telepathy devices Obscene, threatening or annoying communication (a) Every person or persons who, with intent to annoy, telephones or makes constant contact by means of an electronic communication device with another and addresses to or about the other person any obscene language or addresses to the other person any threat to inflict injury to the person or any member of his or her family, or any property or personal possessions is guilty of a misdemeanor. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. (b) Every person or persons who makes repeated telephone calls or makes repeated contact by means of an electronic communication device with intent to annoy another person at his or her residence, is, whether or not conversation ensues from making the telephone call or electronic contact, is guilty of a misdemeanor. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. (c) Every person or persons who makes repeated telephone calls or makes repeated contact by means of an electronic communication device with the intent to annoy another person at his or her place of work is guilty of a misdemeanor punishable by a fine of not more than one thousand dollars ($ 1,000), or by imprisonment in a federal prison for not more than one year, or by both that fine and imprisonment. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. This subdivision applies only if one or both of the following circumstances exist: (1) There is a temporary restraining order, an injunction, or any other court order, or any combination of these court orders, in effect prohibiting the behavior described in this section. (2) The person or persons makes repeated telephone calls or makes repeated contact by means of an electronic communication device with the intent to annoy another person at his or her place of work, totaling more than 10 times in a 24-hour period, whether or not conversation ensues from making the telephone call or electronic contact, and the repeated telephone calls or electronic contacts are made to the workplace of an adult or fully emancipated minor who is a spouse, former spouse, cohabitant, former cohabitant, or person with whom the person has a child or has had a dating or engagement relationship or is having a dating or engagement relationship. (d) Any offense committed by use of a telephone may be deemed to have been committed where the telephone call or calls were made or received. Any offense committed by use of an electronic communication device or medium, including the Internet, may be deemed to have been committed when the electronic communication or communications were originally sent or first viewed by the recipient. (e) Subdivision (a), (b), or (c) is violated when the person acting with intent to annoy makes a telephone call requesting a return call and performs the acts prohibited under subdivision (a), (b), or (c) upon receiving the return call. (f) If probation is granted, or the execution or imposition of sentence is suspended, for any person or persons convicted under this section, the court may order as a condition of probation that the person participate in counseling. (g) For purposes of this section, the term "electronic communication device" includes, but is not limited to, telephones, cellular phones, computers, video recorders, fax machines, pagers or synthetic telepathy devices. Section 5. Assault and battery with an electronic or directed energy weapon Any person or persons who in the course of organized stalking and harassment, commits an assault upon the person of another with an unauthorized directed energy weapon shall be punished by imprisonment in a federal prison for two, three, or four years or by a fine not exceeding ten thousand dollars ($10,000). For the purposes of this section the term directed energy weapon is defined as any device that directs a source of energy (including molecular or atomic energy, subatomic particle beams, electromagnetic radiation, plasma, or extremely low frequency (ELF) or ultra low frequency (ULF) energy radiation) against a person or any other unacknowledged or as yet undeveloped means of inflicting death or injury; or damaging or destroying, a person (or the biological life, bodily health, mental health, or physical and economic well-being of a person via land-based, sea-based, or space-based systems using radiation, electromagnetic, psychotronic, sonic, laser, or other energies directed at individual persons or targeted populations for the purpose of information war, mood management, or mind control of such persons or populations; or by expelling chemical or biological agents in the vicinity of a person. (6) China victims have discussed to write to members of China National People's Congress We need victims to prepare email lists of members of China National People's Congress The letter will be written by Mr. Zhongqing Qi. (7) T Shirt campaign China victims have discussed to make some T shirts which for wear and sale. We will print some words on the T shirt " Peacepink We share Peace and Love! We against Mind Control and DEW abuse and torture!" The Material of T shirt will be high quality cotton and will be well make. I have already searched, the Cost of Product will be RMB10 yuan( about USD1.4)per piece. We welcome any opinion which regarding the style, words or other thing about T shirt. We also accept order in advance. Please contact soleilmavis@yahoo.com Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96646
  - 9
    - Other Users are Connected This evening after running my nightly anti-virus program, I went to shut down my computer. When I clicked to confirm the shutdown, a msg poped up saying that others were connected to my computer and would be disconnected if I shut down. My question: is there a log file that tracks who is logged into my computer? I am on a wireless network, but have secured it from public access. Thanks in Advance for your help. RR Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96645
  - 10
    - IAS error code 96 and 97 I am using windows server 2000 with IAS installed. Using PEAP as protocol, AD user login name and password. I have got two error codes for the failed authentication CODE 96: Access request for user HKRI\michael.chau was discarded. Fully-Qualified-User-Name = <undetermined> NAS-IP-Address = <not present> NAS-Identifier = ESW-0124 Called-Station-Identifier = <not present> Calling-Station-Identifier = <not present> Client-Friendly-Name = Zyxel Client-IP-Address = 172.18.252.62 NAS-Port-Type = <not present> NAS-Port = <not present> Reason-Code = 96 Reason = The authentication request was dropped because the session timed out. CODE 97 Access request for user HKRI\michael.chau was discarded. Fully-Qualified-User-Name = <undetermined> NAS-IP-Address = <not present> NAS-Identifier = ESW-0124 Called-Station-Identifier = <not present> Calling-Station-Identifier = <not present> Client-Friendly-Name = Zyxel Client-IP-Address = 172.18.252.62 NAS-Port-Type = <not present> NAS-Port = <not present> Reason-Code = 97 Reason = The authentication request was dropped because it contained an unexpected packet. Any idea Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96642
  - 11
    - MICROSOFT AWARD E-LOTTERY LONDON I got this letter from THE DESK OF THE MICROSOFTâ?¢ PROMOTIONS MANAGER INTERNATIONALPROMOTIONS/PRIZE AWARD DEPARTMENT by ELECTRONIC EMAIL AWARD WINNING NOTIFICATION AWARD PRESENTATION CENTER : UNITED KINGDOM.ATTN:WINNER. IT ABOUT Total amount won: Â£1000000.00. I don't know it is true or not. please help me . please send answer to my e-mail:ningkeyang@hotmail.com Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96640
  - 12
    - please help me i have a problem with an user. Last night (10.02.2008) someone abused me with webcam from erkan_pendik@windowslive.com. i want to complain him to a solicitor and i want to know who is he. whence i want his mail list to find him or if u could give him ip addres i give it to solicator. Please help me Thankyou in advance , sincerely.. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96631
  - 13
    - Certsrv on a remote server Everyone, I have an environment that uses a Stand-alone CA to issue certificates to remote users from a public web site using web enrollment. This cert is used for authentication for another web site. Right now I have a server farm behind load balancers, but only one of them is configured as CA with the web-enrollment piece (certsrv). As you can imagine, this acts as a single point of failure and means that we can't use the load balancers for this; we have to always go to the single server. I would like to put copies of Certsrv on the other web servers so that I could balance these, but I am concerned with the communication between web enrollment and the CA and what the configuration steps would be. I am trying to avoid the overhead of configuring subordinates on the other web servers and issuing locally. Advice? -- Ryan Hanisco MCSE, MCTS: SQL 2005, Project+ http://www.techsterity.com Chicago, IL Remember: Marking helpful answers helps everyone find the info they need quickly. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96629
  - 14
    - redundant wan We have two connections to the internet (1 T1 and 1 DSL) setup for redundancy purposes on a router with 2 wan ports. These connections both have their own pool of IP addresses. Our name resolution is setup to point to IP addresses bound to the T1. We recently had a situation where our T1 went down and we had to disable that WAN port on our router until it was available again. In this process we found that we needed to setup a second ftp subdomain (ftp2.mydomain.com) and tell our customers to use that name. My question is how can we make it so that we don't have to notify our customers to use the other subdomain should this happen again without having to make dns changes. In other words, if ftp.mydomain.com is bound to our T1 on 65.1.1.1 and out T1 goes down, what would we need to do to make sure ftp.mydomain.com goes through our DSL line bound to 64.1.1.1 (IP addresses are not real, just examples). Would we need to change our topology, or is there a way to set a secondary IP or route for our dns names? Any feedback is much appreciated. Thanks, Marc Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96627
  - 15
    - Active Directory and DMZ I recently faced a situation where a sharepoint was part of a domain inside a DMZ. There was a separate domain, inside the corporate network. The element I was concerned with was the following : the DMZ domain trusted the internal domain and the sharepoint allowed users from the inside to access some ressources. My assumption was that this was a potential security breach since multiples ports needed to be open between the inside and the DMZ, and that this architecture could allow an attacker to eventualy get to the inside from the DMZ. I am just curious about what would be the 'best practices' regarding that situation. Of course you can have just two domains, but obviously the people on the corporate network need to share ressources with partners outside. What is the recommended way to deal with such a situation ? Is there any safe way of allowing internal users to simply authenticate on such a shared ressource with the outside ? Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96626
  - 16
    - Recent Flaw with some ActiveX controls (Facebook, Yahoo) - how is it I'm aware of the recently alerted flaw in the image uploder ActiveX control used by some popular social networking sites. But I haven't found technical details to explain where the risk actually lies... Is it in the Uploader talking to a malicious download application or is it the Uploader opening a malicious image file. Or is there a different attack vector? I don't suppose Facebook or MySpace would intentioanlly post a malicous download element to the Uploader - although someone could spoof one of these sites to get at an unsuspecting user. Or if it is crafted image files that we are worried about then as long as users stick to pictures which they know to be ok (such a photos they've taken themselves) then surely the risk is quite low. I'm guessing that the risk is related to the first mentioned above in that a malicious site could invoke the ActiveX control and then pass it crafted information- is that right? Thanks Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96625
  - 17
    - Help with 'web bugs' requested. (If you don't know what web bugs are, see eff.org or elsewhere) Web bugs, also called web beacons, and by other names, are a non-cookie, non-IP related way to track people on the internet. In a way, it has made protection against cookies almost obsolete. I've read that some ad-blocking programs would block some web bugs, but I'm looking for something that blocks, detects and is able to scan for web bugs (or if that's too much, just part of that). I use IE 7. (No Firefox !) The issue is really privacy. Seeing ads can be annoying, but my real issue is preserving some privacy by not allowing myself to be tracked wherever I go on the internet. Any programs, means to achieve this ? I suppose proxies or anonymizer services might help, but they have their own disadvantadges. Suggestions ? Too bad that most people don't know about 'web bugs'. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96623
  - 18
    - 802.1x wired , and logon script I am using 802.1x for wired computer connection to domain, using AD domain user account name and password. When users try to logon to the domain, it aways wait for a very long time.(about 30s and more) And the 802.1x authentication always successed only after the desktop icons are shown. And user domain logon script for mapping drive is failed. How can I solved the problem?? Thanks Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96621
  - 19
    - Norton Antivirus & Windows Security Center Open NAV2007. On the norton protection center window above Basic PC Security click OPTIONS. On the Norton Protection Center Options window select General Settings Under Windows Security Center alert settings check the box. Show messages from Windows Security Center. Click ok. Close NAV Then open Security Center it should be working as normal. Hope This was helpful Kev136 Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96613
  - 20
    - part II how to start stop service without the password sorry that a simliar queustion may have answered before. this has a new twist. :) I have a domain user account started a service. For reason unknown, Local admin can't restart it, or starting it after it was stopped. only one domain user have to start it using the password of the domain user. how can I have it so all users belonging to the group local admin can start stop the service without the password of that domain user. here is the currently output from accesschk. thanks. C:\>accesschk "DomainName\user1" -vc MSSQLSERVER AccessChk v4.02 - Check access of files, keys, objects, processes or services Copyright (C) 2006-2007 Mark Russinovich Sysinternals - www.sysinternals.com RW MSSQLSERVER SERVICE_ALL_ACCESS -- ps: the reply button on my browser doesn't work. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96612
  - 21
    - Creating Certificate for a wireless projector I am trying to deploy wireless projectors using certificates. I currently have 2K3 R2 servers using PKI and Radius. I currently use AD to autoenroll computers so that they can connect via our Cisco Aironet 1100 series AP's. I am wondering if there is a specific certificate template I need to modify so that I can use the web request to generate and then install via a thumb drive? Any help is greatly appreciated! Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96611
  - 22
    - revoring data Hello frnds, my os corrupted so I some steps to recover but cant . But finally when I installed Xp I found that my 40gb harddisk (3 partition )have combined to one C partition itself and all my data has been deleted . Is there any way that I can recover my data pls help . Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96608
  - 23
    - Modifying permissions with XCACLS.vbs Hello, I have a question about running XCACLS.vbs. I'm trying to change folder permissions but I'm not using the built-in security groups - I want to use domain groups; specifically domain admins and domain users. I read online that if one uses SID# in place if a group name then that should work. I call XCACLS. from a batch file. A sample of my existing (and currently working as expected) file looks like this: cscript xcacls.vbs "C:\WINDOWS\regedit.exe" /G Administrators:F cscript xcacls.vbs "C:\WINDOWS\regedit.exe" /E /G SYSTEM:F Additionally, I read that the domain SID can be found in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \ProfileList. I also read the SIDs for domain admins and domain users are: SID: S-1-5-domain-512 Name: Domain Admins SID: S-1-5-domain-513 Name: Domain Users So, armed with this information I took the two lines above and tried to do this: cscript xcacls.vbs "C:\Temp" /G SID#S-1-5-21-131504274-120818031-269197707-1108-512:F cscript xcacls.vbs "C:\Temp" /E /G SID#S-1-5-21-131504274-120818031-269197707-1108-513:F It didn't work. While I didn't get a script engine error or anything, when I checked the permissions on that folder, all the entries were gone - it was a blank display. How can I modify the permissions to use domain admins and users? Suggestions are greatly appreciated. Thanks! Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96604
  - 24
    - Trojan.Mailskinner.C ??? Hi all, I have just finished a scan of my system with bitdefender security suite 2008 and the results were that i have a Trojan.Mailskinner.C and also 2 Adware.NaviPromo.BYC, bitdefender can't get rid of them because it says they are part of an archive. The only thing i know that might have got rid of them was to scan in safe mode and delete from there but defender won't let me do that. I don't know how to delete manually so if anyone can give me step by step instructions i would be so very thankfull, many thanks in advance Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96600
  - 25
    - i think ive been hacked maybe ???? -- yep its me Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96596
- Next
  - 1
    - MSI vs Windows Vista Home Hello everyone! I try to install an application (Windows Installer), the wizard Installation opens smoothly, but when you start copying Files to disk bypasses the following error: "The system administrator has set policies to prevent this installation" What could be the problem? I have Windows Vista Home Edition and i'm the 'Administrator'! Since already many thanks! Gustavo Arriola Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96595
  - 2
    - PLEASE help me determine if I've got issues; I've done everything I know how to do! This is long, but I want to give as much info and what I've done to try and tackle this myself as possible. I really need some help at this point, so I hope someone out there has the time and can provide some much needed and much appreciated assistance/advice, etc. I work at a pretty low-tech place with 8 PC's, all running XP, using comcast's cable internet service, with file sharing set up so all users can access a shared folder on one of the PC's. No user or group policies are set up. All PC's use TrendMicro's pay service, we havy a Linksys router, and I periodically run Spybot and a few other favorite virus/trojan/bad stuff finders on all the PCS' (but TrenMicro is the only thing running 24/7). There's also one NetGear wireless access point for an in-office laptop (it requires a web key to log into the network) We use a webmail software located on our dedicated server at a hosting company (where our website is) to do email; the web server at the hosting company is also the email server. Currently it's using SmarterMail (which is apprently a pretty popular partnered email software with hosting companies). So users use a web browser to log into their email, which is housed on the dedicated server. We've had some emails sent to yahoo email addreses come back with a rejection notice due to yahoo user complaints about spam (not the users the email was sent to, just users in general, apparnetly), and we've also had undeliverable mail come back looking as if we sent it but we know we didn't (there's spammy stuff in it). Also, Comcast recently disallowed all outgoing traffic from our public IP (the router) that was looking for port 25, because they said they saw a lot of spammy-looking traffic leaving our router as well. Since it seemed like we had a real issue going on, I followed all the directions SmarterMail has to make sure SMTP requires authentication, etc., all the steps to minimize possible hijacking and whatever. I used a few of these online websites where you put in the IP address of the mail server and it sees if it looks like an open relay, and they all reported negative. I had everyone change their passwords to relatively strong ones for logging in t our mail server. The problem seemed to remain. Then I turned on the outgoing log on the Linksys router. About every ten seconds I see a couple outgoing packets going to the same IP but with a different last number, then after about ten of those it goes to another series of IP's with differnet last number. For instance, I'd see outgoing to: 64.86.95.6 64.86.95.7 64.86.95.8 64.86.95.27 64.86.95.27 64.86.95.10 64.86.95.26 64.86.95.10 64.86.95.10 then there are bunch that are ("myserver" used instead of my actual web server) smtp.myserver.com smtp.myserver.com smtp.myserver.com Some of these come from my own box's internal local IP, some come from the other internal local IP's. So, unless these are legitimate (like Windows update doing checks, trend micro doing checks, etc.), it appears I actually DO have something sending out IP traffic from inside. I looked up some of these IP's, and the most numerous batch of outging IP's (starting with 64.86.95) show up as belonging to: Teleglobe Inc. TELEGLOBE (NET-64-86-0-0-1) 64.86.0.0 - 64.86.255.255 Akamai Technologies AKAMAI-TGB (NET-64-86-95-0-1) 64.86.95.0 - 64.86.95.255 I found one (and one only) reference to this IP and this company on the web, where someone else was wondering about it, and it seemed like the assumption was it was a place doing stuff for Microsoft's Windows update. But when I turn off update, I still these outgoing traffic items in the Linksys log. I feel as if I've done everyhting I can and/or know how to do, so can anyone out there tell me a good solid way to see if I have some kind of SpamBot on our side of the router, or if someone has hacked our email server externally? The problem's getting worse, it seems, and I don't know what I can do when none of the popular security softwares find anything, but comcast and yahoo and our inbox full of undeliverablre messages looking like they were sent by us are pointing to us having a serious issue. Please help, we rely on our ability to send emails to subscribers, and they're getting rejected due to "user complaints", and we can't afford to be blacklisted (and yes, we only send to subscribers, we follow all te opt-in and opt-out stuff, and are very consciensious about keeping our mailing list clean. Please help! Your time and assitance would be GREATLY appreciated. And thanks for reading. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96594
  - 3
    - requesting a certificate in Vista. Hi there, When requesting a certificate in Vista, if you choose to create a custom request (not going to use a template) and go to the "details" area, there are different areas to go through. The first is Subject. For subject name and alternative name, there are alot of choices. Is what you pick influenced by what the policy and CPS of the receiving CA says it needs from you? Meaning, the CA's policies dictate what you should pick in order to get a certificate from that CA. And all CAs can differ? Same thing for the Extensions tab? Thanks! Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96591
  - 4
    - Script to list member of Local Admin Group I am looking for a VB Script to list member of local admin group for my servers in my domain. Example Domain=contoso Server OU=Servers ServerA, Server B ...................... I want to list member of local admin for all the servers. Thx, MA Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96590
  - 5
    - icacls misreports BUILTIN\Users:(RX) on C:\ On a number of W2003 servers here, if I do icacls C:\ I get... C:\ BUILTIN\Administrators:(F) BUILTIN\Administrators:(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(F) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) CREATOR OWNER:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) BUILTIN\Users:(CI)(AD) BUILTIN\Users:(CI)(IO)(WD) Everyone:(RX) The ACE BUILTIN\Users:(RX) is wrong! It *behaves* and indeed appears in the graphical DACL editing tool in Explorer (Properties -> Security-> Advanced) as if it were BUILTIN\Users:(CI)(OI)(RX) (That is to say it does get inherited by objects and containers). If I edit that ACE in Explorer - but save it without making any *visible* change then it subsequently appears correctly in ICACLS. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96587
  - 6
    - certificate import Wizard on Vista not working: I have Vista client PCs in a workgroup. I am logged into them as Administrator. When I try to import a certificate by doubleclicking on the CA certificate I want to import (I put it on the desktop or the C drive or whereever) and using the import Wizard, the import says it is successful but does not actually do anything. The same thing happens if I try to import any certificate from the web enrollment website of the CA (CA is standalone). I have noticed that when this does NOT work, in the "Completing the Certificate Import Wizard" window, it shows the Certificate Store Specified, the Content, and the File Name. THE FILENAME IS BLANK. The only time this does work is if I go to the certificate store, right click and start the Import Wizard from there. Then the import really does work and the File Name area actually shows the certificate file location (c:\users...\certifcate.cer) Anyone else run into this? Is there something I need to do in Vista to make this work right? Thanks! Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96577
  - 7
    - CMAK and certificate. Hello! I have a big problem with CMAK and my personal certificate. One month ago my certificate named xxx expired. I used it to make VPN connection with server. No I have yyy certificate. When i try to use CMAK to make connection, after five blinding windows with "Accessing SmartCard" I'm getting "Key does not exist." error message. In CMAK log i see, that CMAK is trying to use xxx certificate! I don't have it in any container. I looked in user certificates, local machine certificates.... Without result.... I have my certificate installed in personal/certificates container under current user. Under local computer personal/certificates i have my machine certificate. Trusted root certification contains my CA cert. 1) Why CMAK see certificate, that does not exist? 2) How to force CMAK to work correctly with my certificate? Regards Leszek Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96575
  - 8
    - info on the National Information Security Group (NAISG) + an invitation To all, I am pleased to announce the opening of three new chapters of the National Information Security Group (NAISG, http://www.naisg.org). These include the New York City, Silicon Valley and Washington, DC chapters, which will complement the founding New England chapter (Boston, MA). NAISG membership is open to anyone that is interested in IT/security administration, including pros, consumers, managers/executives, law enforcement personnel (local police and FBI regularly attend the meetings), educators, students and more. We never charge for membership; you only need to sign up at our Web site to become a member. We currently have more than 1,000 members in our ranks. In addition to our monthly chapter meetings, we have an email-based Security TechTips list that includes members from around the world. You can sign up for this at http://www.naisg.org. If any of you are in the New York City area this coming Monday (February 11), please check out the meeting details at http://nyc.naisg.org. The topic will be "Cyber Surveillance and Employee Monitoring - What Techniques Are Available, Should We Even Use Them and What Are Employer/Employee Rights?" The meeting will be held at the Microsoft office in midtown Manhattan. Yours, Brad ___________________________________________________________________ Bradley J. Dinerman, MVP - Identity & Access (Enterprise Security) President, National Information Security Group http://www.naisg.org Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96571
  - 9
    - Removing Delux Communications Spy Wear Need help. Trying to get a good reference to remove Deluxe Communications ADware from my Windows Xp system. Thanks Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96567
  - 10
    - exporting certifcates from Certificate services in PEM format Can anyone direct me to an article etc that confirms that I cannot export a certifcate from Certificate services in PEM format? Thanks. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96566
  - 11
    - Certificate store question Hi Folks, Does anyone know the earliest versions of windows client and server OS that had a certificate store? Thanks! Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96565
  - 12
    - ACL To Create and Modify Only New Files? What ACL on NTFS will give a group Read-Only access to files currently in the folder, but the ability to create and modify and delete new files in the folder? I have a badly behaved program that wants to write its TEMP files into its program installation folder. I would like to avoid the more permission Modify permission to the users of the application on all files in the folder including the application's binaries. One solution appears to be to give files currently in the folder the desired ACL and then break inheritance. Then give Modify access to the folder and all children. That isn't my first choice since later updates to the application will probably install new binaries, and this approach leaves those installed with Modify access inherited from the folder. -- Will Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96561
  - 13
    - Computer Info Compromised? Hi: I have a friend who had some old letters of one of his kin in a .doc file in his My Documents folder in his computer. The letters were enough to have formed a book about the 1800's written by this kin. He Googled the letters info and found some data applicable these letters which he has never shared with anyone. Also the .doc file string is exactly as that in his computer. In fact, he has found a copy of these letters for sale on the internet and the seller appears to be from the same area of the state where he lives if not the same city. His name is referenced in as the author of these letters. So my question is how did someone acquire this data from his computer, as apparently his computer has been compromised. It would appear to me that it had to happen in one or two scenario's. First someone somehow accessed his computer through the internet or second when he had taken his computer to a shop for repair. Since it appears that the seller is from the same area of state as he is, then my first inclination would be that this info was taken from his computer during a repair. I just really have don't have the expertise in this area to try and make a good determination. If anyone has any comments, suggestions, and/or recommendations as to how all this could have happened I would be most appreciative to read them. I apologize if I have posted this in the wrong newsgroups. Thanks Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96528
  - 14
    - standalone CA - cannot use browser to install certs Hi there. I have a test lab running - it looks like this: IPSECCA1 = the Root CA, standalone, in a workgroup called WORKGROUP IPSECCPC1 and IPSECPC2 vista clients, in WORKGROUP IPSECCA1 is a root CA, running 2008 AD CS, standalone, with web enrollment installed. I can request certs, and then go to the cert authority on IPSECCA1, and issue the certs. Then my clients go to the website, and download the certs, and click the install button. They say they get installed but they do not. I have to download them to the local machine and double click them to install them. I have noticed that the file location is missing when it does not work using the web site to install the cert. Anyone have an idea on why this is not working quite right? Thanks! Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96525
  - 15
    - 2008 Trend Micro Internet Security is NOT is compatible with Windows 2008 Trend Micro Internet Security is NOT is compatible with Windows Vista SP1 and Windows XP SP3 I have deleted all of the old 2007 and new 2008 Trend Micro Internet Security virus software from my computer, because of the multiple alert messages, that I was having with their new 2008 upgraded software. If the Trend Micro Personal Firewall and the Unauthorized Changes Prevention features main components do not work with the new service packs from Microsoft, why are they still selling this non-working software to the public? Also, I don't want to wait until sometime in February 2008, for them to released a "working" version of their Trend Micro Internet Security, that is compatible with Windows Vista SP1 and Windows XP SP3. I don't want to remove any new Microsoft service packs, or uninstall the 2008 Trend Micro program installed in my computer and re-install the PC-cillin Internet Security 2007 back into my computer, and wait again.... until the release of their new 2008 working version. I was receiving these error messages: Trend Micro Internet Security Message: Your Unauthorized Change Prevention Service has shut down. Try restarting Trend Micro Internet Security to restore Your Unauthorized Change Prevention Service. If the problem persists, please restart your computer. If you continue to receive this warning, please contact Technical Support. I keep getting this "Alert" message: "Alert Message: Trend Micro Internet Security. Unable to recognize the software configuration. Restart your computer to restore the missing information. If the problem persists, please contact technical support." I have been working on their error alert messages and replies, since 12/24/07. After eight or more emails back and forth....and multiple number of lines of their instructions, that's it!! I do not want to screw up my computer, I do not want more messages, screen shots, replies, deletes, uninstalls and then reinstalling any more files...in my computer, hard drive or registry. I asked Trend Micro, that I want a refund ($40.45) for this subscription. They replied: I am sorry to inform you, but we can no longer refund the Trend Micro program that you have purchased from us. Refund application should be requested within 30 days from the date of purchase. Refunds after 30 days are given in a case to case basis. This is after the all attempts to fix the issue failed and the case has been forwarded to the Level 2 support. Please provide us with the following so that we can forward this to the Level 2 support In order for us to have a detailed picture of the problem, please include in your reply, screen shot(s) of the message(s)/ notification(s). Continued.....more@#$%^& ---------------------------------------------------------------------------------------------------------------- Product: Trend Micro Internet Security - 2008, Trend Micro Internet Security Pro - 2008, Trend Micro AntiVirus plus AntiSpyware - 2008 Operating System: Windows XP - SP2, Windows Vista Published:12/20/07 1:38 PM Solution: This error will appear if you have installed the 16.05 version of Trend Micro Internet Security Pro, Trend Micro Internet Security and Trend Micro AntiVirus plus AntiSpyware 2008 on a computer running Windows Vista with Service Pack 1 or Window XP with Service Pack 3. The Trend Micro Personal Firewall and the Unauthorized Changes Prevention features main components do not work with the new service packs from Microsoft. A working version of Trend Micro Internet Security Pro, Trend Micro Internet Security and Trend Micro AntiVirus plus AntiSpyware 2008 with Windows Vista SP1 and Windows XP SP3 would be released sometime in February 2008. The release would be timed before Microsoft uploads the new service packs in their automatic update servers for Windows. To prevent this message from appearing, follow the steps indicated below: a.Check the program version of the Trend Micro program installed on your computer. b.If you are using version 16.05 and you want to continue using this latest version of the Trend Micro program, you must uninstall the non- working service pack from Microsoft. c.If you do not want to remove the new Microsoft service packs, Trend Micro suggests that you uninstall the Trend Micro program installed in your computer and install PC-cillin Internet Security 2007 until the release of the working version. source: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1036680&id=EN-1036680 -------------------------------------------------------------------------------------------------------------------- Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96522
  - 16
    - Permissions on XP Security tab grayed out I have a department share, where the director is suppose to have Full access to the share and subfolders. The share is on a Windows server 2003 SP2. The computer the uses is XP Pro with SP2. Share rights are set at Change. NTFS rights for the director are set to Full Control . the problem Iâ??m having is this: When the director whishes to change permissions on subfolders or documents, both the add and remove button are grayed out. The director canâ??t change any of the permissions for the existing users. -- Thank You! Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96519
  - 17
    - AD CS 08 - Installation UI question: Hi, Whe I go to install a stand-alone CA, before you get to the screen where you pick standalone or enterprise CA, the screen before it give you choices to install CA, Web Enrollment, Online Responder, or NDES. Iknow that web enrollment works with a standalone CA, and NDES cannot be installed (it wont let you), but what about Online Responder? Is it ok to put an Online Responder on a standalone CA? How would the two work together? Thanks, Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96517
  - 18
    - who does a PKI audit? Who deems the need for a PKI audit and who would actually do this audit? Is this enforced by law? Thanks, Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96515
  - 19
    - Access computer from the network Windows Server 2003 standalone, no AD. Two local accounts in use: Administrator and Lab. Both are members of Administrators group, both have passwords. Can log in with either user at the server console. Using an application that requires shared directory. Shared the directory from the server end, applied appropriate permissions for both users: Allow | Full Control. Try to browse to server, get error message: your user does not have rights to log in (I'm paraphrasing - it's error 1385, I believe). Went to Administrative Tools | Local Security Settings | Access this computer from the network. Sure enough: zero entries in the list. So I "add user or group" and add Administrator and Lab to the list. Click ok, go to a student workstation, no problem, I can browse to the shared folder. I run the install, go to the next workstation, get the same error. Go back to the server console, Administrative Tools | Local Security Settings | Access this computer from the network, no entries in the list. Very sure that I have already done this, I add Administrator and Lab to the list. This goes back and forth. Access from the network lasts anywhere from a few minutes to as much as a day. This makes no sense to me and I'm not finding anything in the KB...any help? Thanks, tony Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96514
  - 20
    - What is the file rbsolnUpdate.exe for? Hi, I had a firewall alert on 2 files: rbSolnUpdate.exe and rbSolnUpdateENU.2.5.0.exe. I haven't been able to find out anything on these files. They were located in the ...\Local Settings\Temp folder. Now they are gone but I have a file named RBSOLNUPDATEENU.2.5.0.EXE-3648439D.pf in the Windows\Prefetch folder. Does anyone know what these files are for and if they are safe files? thanks TP Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96511
  - 21
    - Can smartcard for logon be disabled? Does anyone know how to disable the requirement for logging on with a smartcard? When the computer is outside of a domain, a user can lock the computer and a smartcard placed on an attached reader is ignored. If the machine joins a domain, when a user locks the computer, a smartcard placed on the smartcard reader will initiate an attempt to logon with that smartcard. I dont want that to happen. I dont want to use the smartcard for logging on. The problem occurs even if the user is logging on with a local username. I want to be able to access the smartcard from my software while the machine is locked. When I attempt to program the card with the logon message displayed, I cant get access to the smartcard and it appears to break the logon procedure as well. The machine constantly displays "The card supplied requires drivers that are not present on the system. Try another card". Once in this condition where I attempted to access the card from my software, removing the card does nothing, the message is constantly re-displayed, there appears to be no out for this problem other than shutting down the computer. I've changed the local policy to not require a smartcard. That did not help. There is no defintion within the group policy for this option, so my local policy should still be in effect. The current platform is WinXP be must also function on Win 2000 and Win 2003. Do I have to write a custom gina??? -- Steve G Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96508
  - 22
    - Verisign Security Digital IDs for Office Although not listed on the Microsoft website as a provider of digital ID certificates for Office 2007 on this page: https://digitalid.verisign.com/enrollment/MS_pcmp.htm Verisign is indeed a provider. Special instructions have to be followed when requesting a certificate with Vista/IE7 which are listed on the top of the certificate enrollment page. https://digitalid.verisign.com/client/class1MS.htm Also special instructions for installing a certificate in various version of Outlook including Outlook 2007 are here: http://www.verisign.com/support/digital-id-support/page_dev029379.html Certificate costs are $20/year but you can get a 60 day free trial to try it out. The certificate allows for both: 1. Digital signing. 2. Encrypted email (the receipient of the email must have a certificate as well). The encrypted email is very important for sending secure information including credit care numbers, social security numbers, and patient medical information. Some people send secure information such as this without encryption but they should not. Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96505
  - 23
    - XML Notepad silently contacting RIPE I have nVidia Active Armor firewall NIC. I am using XML 2007 to edit xml files and I was notified by the firewall it was connecting to the internet to this location: OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL ReferralServer: whois://whois.ripe.net:43 NetRange: 84.0.0.0 - 84.255.255.255 CIDR: 84.0.0.0/8 NetName: 84-RIPE NetHandle: NET-84-0-0-0-1 Parent: NetType: Allocated to RIPE NCC NameServer: NS-PRI.RIPE.NET NameServer: SEC1.APNIC.NET NameServer: SEC3.APNIC.NET NameServer: SUNIC.SUNET.SE NameServer: TINNIE.ARIN.NET NameServer: NS3.NIC.FR Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 2003-11-17 Updated: 2004-03-16 Who are this people and why is XML 2007 contacting them? Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96500
  - 24
    - Policy CAs: I am still not completely sure as to the functions of a Policy CA. I understand that it is an intermediate CA. And I understand the definition found on Technet (below). What I am not clear on is HOW it describes these policies and how it forces other CAs below it to abide by the rules. I have added specific questions in line below: Thanks! Kristin Policy CA definition on Technet: The role of a policy CA is to describe the policies and procedures that an organization implements to secure its PKI, the processes that validate the identity of certificate holders, and the processes that enforce the procedures that manage certificates. ---> how does it decribe the procedures? I know about the website URL for policy statements, but how does it describe the processes and procedures? What form do they take? A website with text? A template? A policy CA issues certificates only to other CAs. The CAs that receive these certificates must uphold and enforce the policies that the policy CA defined. ----> How are the chiild CAs forced to uphold and enforce the policies? It is not mandatory to use policy CAs unless different divisions, sectors, or locations of your organization require different issuance policies and procedures. However, if your organization requires different issuance policies and procedures, you must add policy CAs to the hierarchy to define each unique policy. ---> How are the policies defined? Are they done in the .inf files? What makes up the policy exactly? For example, an organization can implement one policy CA for all certificates that it issues internally to employees and another policy CA for all certificates that it issues to non-employees. Thanks, Kristin Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96496
  - 25
    - Windows XP Home firewall IP Addresds exceptions list I have already asked this question on windows Help and Support forum but got very little response. I repat the question below. I wish to allow a certain scanning IP address to have access to my computer . I made various adjustments to Windows XP home firewall in the exceptions list. The scanning computer was then able to scan my computer but only once. Since then the scanning computer has unable to gain access to my computer. I have recentlly received the following from the scanning organisation. "Try looking to see if your cache contains our IP address . Also , attempt checking the logs to see on what level our IP is being blocked." What cache and what log do they mean ? I have sent an e - mail to the site concerned 7 days ago but have had no reply. -- FLYNNE Tag: How do you get past Vista security ? Digitally sign your malware ! Tag: 96495

http://sunbeltblog.blogspot.com/2008/02/dangerous-new-fake-american-greetings.html

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Top